Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
File: ES1lq7x-8AUScohER5KrhvsVwu4.mft (raw, json)
Hash identifier: mgCihJo+IPf/8go4S9AmJRjvDNE55LK3e68ddK1X+QM=
Subject key identifier: 47:0E:F8:ED:E4:84:AD:22:AA:B3:CD:0B:80:EB:DB:88:39:F2:61:CE
Authority key identifier: 11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
Certificate issuer: /CN=112d65abbc7ef005127288444792ab86fb15c2ee
Certificate serial: 019D38D3CA1879998657B622FB1A11A565A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
Manifest number: 0A12
Signing time: Sun 29 Mar 2026 09:01:37 +0000
Manifest this update: Sun 29 Mar 2026 09:01:37 +0000
Manifest next update: Mon 30 Mar 2026 09:01:37 +0000
Files and hashes: 1: ES1lq7x-8AUScohER5KrhvsVwu4.crl (hash: opTtuXl/ED9TpZZX43fd4SR7+2uZeGxRDjwQmSCc71g=)
2: NyqJ3HcC-3DqTRjPEZHaf1vVpmk.roa (hash: kzMbI7FhKbCR9OfECdQk1NAYRQo9Ic9dt4s+QetZXtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ca:18:79:99:86:57:b6:22:fb:1a:11:a5:65:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112d65abbc7ef005127288444792ab86fb15c2ee
Validity
Not Before: Mar 29 09:01:37 2026 GMT
Not After : Mar 30 09:01:37 2026 GMT
Subject: CN=470ef8ede484ad22aab3cd0b80ebdb8839f261ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:e9:2b:c5:b0:ac:97:91:04:f8:b7:20:b9:
ed:3a:be:a8:c9:81:e5:08:5a:cd:9b:3d:a1:6c:42:
b5:c6:4b:02:4e:fe:f1:b4:22:a1:d9:be:d3:d9:fc:
99:4c:60:7b:de:63:6a:31:4d:62:4d:50:d3:b8:04:
75:a5:80:c9:15:bd:a3:e8:4e:89:7f:b5:45:04:1e:
16:7d:89:63:e0:25:51:2b:a1:d8:c7:af:b7:cb:49:
8c:7e:76:f7:b2:b0:d1:7b:d7:0f:0c:69:2c:07:87:
6e:a9:20:c9:b9:b4:81:8e:00:db:6a:af:42:09:59:
3b:e2:67:4c:06:ed:ac:d2:5c:3b:cc:0e:6a:85:db:
9a:30:4c:7d:84:79:51:db:dc:44:53:d4:28:58:e9:
a9:f9:dd:8e:d5:1d:b9:b7:20:a0:80:e7:95:6d:4e:
cd:91:f7:5c:f4:0f:c0:8a:70:42:18:6a:39:c1:fa:
27:89:8b:9f:3c:a4:13:7c:ac:65:5c:40:d6:74:16:
de:0b:9a:79:b6:60:ae:03:a1:dd:6d:06:04:2b:c0:
b1:0b:85:87:fa:5b:10:cd:d1:ea:98:c1:98:95:4f:
f8:94:07:a4:a7:4e:55:1f:47:e5:c8:1f:6e:2f:89:
90:63:68:f3:a6:2f:5d:16:bc:e8:ff:8c:ad:4f:bf:
0d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0E:F8:ED:E4:84:AD:22:AA:B3:CD:0B:80:EB:DB:88:39:F2:61:CE
X509v3 Authority Key Identifier:
keyid:11:2D:65:AB:BC:7E:F0:05:12:72:88:44:47:92:AB:86:FB:15:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ES1lq7x-8AUScohER5KrhvsVwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a037b1-133a-4639-8c7f-636857ee1792/1/ES1lq7x-8AUScohER5KrhvsVwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:38:8b:fb:31:6c:dd:d1:1d:fd:8c:81:96:89:88:60:f3:03:
46:1b:32:82:25:85:d3:19:89:53:09:1d:42:8f:a5:24:33:f8:
b5:16:92:96:dd:91:80:1b:46:af:e3:f3:52:42:4b:eb:c6:e0:
95:f6:58:36:9c:0e:56:99:95:bd:07:ea:8f:83:a9:47:4b:a1:
6c:03:9a:68:89:b0:33:ef:18:2c:86:9d:29:2e:c9:49:33:95:
61:dd:c9:f0:10:4d:59:a9:da:61:4e:5f:3d:50:c8:88:1c:c4:
be:16:9f:b7:6b:41:af:17:33:e6:cb:bf:40:42:b2:f8:e9:9d:
a1:34:a5:93:3c:89:87:96:be:0e:cf:b1:34:75:53:af:dd:78:
29:ef:00:e0:86:cf:29:45:06:90:6d:b7:83:d8:77:7e:a3:ca:
05:26:28:88:b1:79:c3:95:86:7e:c0:3b:84:fa:ee:2e:32:72:
50:13:89:70:44:60:86:79:8a:1c:b0:21:2b:9f:6a:cc:1f:4a:
7d:ec:a3:b2:2f:a5:52:11:1c:a6:03:b9:55:8e:d7:5b:e2:a4:
43:a3:c0:08:e1:1d:c7:35:b5:6d:c5:d8:11:62:47:c7:52:bc:
79:2c:66:6a:5f:07:a3:98:62:bf:a3:70:77:f8:22:1c:8a:8a:
a0:f4:85:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:40 2026 by rpki-client